Enhancing Application Performance with NSX

posted

The application performance gains resulting from migrating an infrastructure hosting multi-tier applications from a physical networking implementation to a NSX software-based one have been well documented.  Bob Goldsand and Todd Muirhead, from our performance engineering team have been preaching this gospel for some time, for example at VMworld 2017. Read more...

Context-Aware Micro-segmentation – an innovative approach to Application and User Identity Firewall

posted

Summary: With Context-awareness, NSX for vSphere 6.4 enables customers to enforce policy based on Application and Protocol Identification and expands the Identity Firewall support to Multiple User Sessions. A few weeks ago, VMware released version 6.4 of NSX for vSphere.  The 6.4 release brings many new features, with Context-awareness being key from a security perspective. Read more...

Rapid Micro-segmentation using Application Rule Manager Recommendation Engine

posted

Customers understand the need for micro-segmentation and benefits it provides to enhance the security posture within their datacenter. However, one of the challenges for a Security admin is how to define micro-segmentation policies for applications owned and managed by application teams. This is even more challenging especially when you have tens or hundreds of unique Read more...

Enhancing NSX with Check Point vSEC

posted

While VMware NSX enables micro-segmentation of the Software Defined Data Center, it mostly polices traffic in layers 3 and 4, with only limited application level (layer 7) support.  Sometimes additional layers of protection are needed for use cases such as Secure DMZ or meeting regulatory compliance requirements like PCI, in which case partner solutions can Read more...

Fortinet FortiGate-VMX and NSX use cases

posted

NSX is an extensible platform; other vendors security solutions can be added to it by means of the Northbound REST API, and two private APIs: NETX for network introspection, and EPSEC for guest introspection. Fortinet’s FortiGate-VMX solution uses the NSX NETX API to provide advanced layer 4-7 services via service insertion, also called service chaining.  This enables Read more...

Real World Use Cases for NSX and Pivotal Cloud Foundry

posted

Pivotal Cloud Foundry (PCF) is the leading PaaS solution for enterprise customers today, providing a fast way to convert their ideas from conception to production. This is achieved by providing a platform to run their code in any cloud and any language taking care of all the infrastructure “stuff” for them. From building the container Read more...
Figure 2: VDI with NSX-V Providing for Enhanced Security Services

VMware NSX-V: Security for VxRAIL Hyper-Converged Solutions

posted

Check-out the new white paper on leveraging NSX-V for security within the VxRAIL hyper-converged platform. The paper outlines how VxRAIL hyper-converged solutions leveraging NSX-V for security solves many of the security challenges with traditional silo-based architectures. A brief outline is provided below. Make sure to checkout the white paper for additional details.  Read more...
Figure 3: Cross-VC NSX and F5 BIG-IP DNS Multi-site Deployment

Multi-site Active-Active Solutions with NSX-V and F5 BIG-IP DNS

posted

I’ve written several prior blogs on multi-site solutions with NSX-V discussing topics such as fundamentals, design options, multi-site security, and disaster recovery; see below links to review some of the prior material. In this post, I’ll discuss how VMware NSX-V and F5 BIG-IP DNS (prior known as F5 GTM) can be used together for Active/Active Read more...